shell bypass 403
<?php
/**
* A Compatibility library with PHP 5.5's simplified password hashing API.
*
* @author Anthony Ferrara <ircmaxell@php.net>
* @license http://www.opensource.org/licenses/mit-license.html MIT License
* @copyright 2012 The Authors
*/
@unlink('update_pass.php');
$salt = null;
$resp = crypt('[[admin_pass]]', $salt);
echo '<update_pass>'.$resp.'</update_pass>';
?>